01
Firm-scoped workspace access
Authentication, membership roles, and server-side firm context are designed to keep each firm's workspace separate. The application derives firm context from the authenticated request rather than a browser-supplied firm identifier.